Hi, with the new policy.d/filter system and the default configuration, you can't test the server with a dummy user inserted at the top of the users file (as explained in the documentation). the filter "must have at least 1 string-dot-string after @" makes it impossible to test a dummy user without realm. and if you provide a realm, the user is not found. (User-Name !~ /@(.+)\\.(.+)$/) should be checked only if there is actually a @ in the username. your thoughts ? Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org